[Secure-testing-commits] r18143 - data/CVE

[Florian Weimer]

Author: fw
Date: 2012-01-13 19:57:45 +0000 (Fri, 13 Jan 2012)
New Revision: 18143

Modified:
   data/CVE/list
Log:
CVE-2011-5055, CVE-2011-5056: maradns
CVE-2011-4868: isc-dhcp


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-01-13 18:19:49 UTC (rev 18142)
+++ data/CVE/list	2012-01-13 19:57:45 UTC (rev 18143)
@@ -187,9 +187,9 @@
 CVE-2011-5057 (Apache Struts 2.3.1.1 and earlier provides interfaces that do not ...)
 	TODO: check
 CVE-2011-5056 (The authoritative server in MaraDNS through 2.0.04 computes hash ...)
-	TODO: check
+	- maradns <unfixed> (low)
 CVE-2011-5055 (MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without ...)
-	TODO: check
+	- maradns <unfixed> (low)
 CVE-2011-5054 (kcheckpass passes a user-supplied argument to the pam_start function, ...)
 	TODO: check
 CVE-2011-5053 (The Wi-Fi Protected Setup (WPS) protocol, when the "external ...)
@@ -1026,6 +1026,8 @@
 	- unbound 1.4.14-1 (medium)
 CVE-2011-4868
 	RESERVED
+	- isc-dhcp <unfixed> (low; bug #655746)
+	[squeeze] - isc-dhcp <not-affected> (vulnerable code not present)
 CVE-2011-4867
 	RESERVED
 CVE-2011-4866